| spk-update.live/_next/static/media/4f117ec02fc103f8-s.p.woff2 |  104.21.72.218 | 200 OK | 44 kB |
URL GET HTTP/3spk-update.live/_next/static/media/4f117ec02fc103f8-s.p.woff2 IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 44264, version 1.0 Hash03c6826d225a339fad5a72e435f19299 991e2551b43e6f294350725e9471534d6c0e4ac1 60e11d985314d4843c7a741d67bc7744c4bf519e50ce08e1d5e74e43414aaff0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/media/4f117ec02fc103f8-s.p.woff2 HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://spk-update.live/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: font/woff2
content-length: 44264
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"ace8-18e7da9373f"
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ykpAz2zpWzXuVJlbu4Kz9FXCxyPSrSuNDPpaEmODoqJa5wbX4hyOcHgUbhcU9qvquLbyDzJY2J2Nqdy0G9H4rdKW1GD24sgeBznkcLWkheWCatT8dndgVLySAuL%2B7YbmqcM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd74546e7f56be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/chunks/6850-69f05608ff4c0533.js | 104.21.72.218 | 200 OK | 4.5 kB |
URL GET HTTP/3spk-update.live/_next/static/chunks/6850-69f05608ff4c0533.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeJavaScript source, ASCII text, with very long lines (10261) Hashe84df5cfa8f0ec371511b376aa8147f7 290566516ff3aeccceb33828c6cfb38696f6b00d 487f69cef6c41b991ef42f02e857c935f6f745f3ef98f7d0d5c43869539024ab
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/6850-69f05608ff4c0533.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"3166-18e7da93747"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qeTC21KC%2Fa7avk5FTUAzBnqe%2FfpYNE5RBYF6R1qzyZKqQ%2FmUgU43l0ig5Lb9l1OICIMWoVcj2xPR%2Fc4TKEQFXk0Vd6U3Bi%2FGEkHUvgqopQQLprsiRqcSC9CIuW3ffh6Fz1M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74548ea556be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/chunks/webpack-cbafb5bd83b319bf.js | 104.21.72.218 | 200 OK | 1.5 kB |
URL GET HTTP/3spk-update.live/_next/static/chunks/webpack-cbafb5bd83b319bf.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeJavaScript source, ASCII text, with very long lines (2657), with no line terminators Hashff307e0e92255d4a5a046cb9648df52b b9f434f0d7bce6307b215bdc9897011719bc59ce 617c1165bfd3e1141325726c510b42fecdce94e246488747bda5dae3dcd9b211
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/webpack-cbafb5bd83b319bf.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"a61-18e7da93743"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3M08fwrwTRT5apBkSmqa90%2F5TZZzOPxzYwYRNhDgkGBCJpf7MctHnkhibyM9H6zcbAKsdMLSSgONcOCwy2u2%2FDCVHH%2B8nB9minIb%2BJlJIE%2BxbdpqW7NEglXjGBxHBQpELpY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74546e8656be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/recaptcha/releases/Hq4JZivTyQ7GP8Kt571Tzodj/recaptcha__en.js |  142.250.74.163 | 200 OK | 202 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/Hq4JZivTyQ7GP8Kt571Tzodj/recaptcha__en.js IP142.250.74.163:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT
File typeJavaScript source, ASCII text, with very long lines (730) Size202 kB (202152 bytes) Hash6afd58bec95bc166d3c68166f86e9e67 9523c602a5d5610332785397cd26d3b9e18873ab 9368f8ab141b9545a2b9e279abe8fef65a60091050ebeab9b63dd4c1bd0d38e1
GET /recaptcha/releases/Hq4JZivTyQ7GP8Kt571Tzodj/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://spk-update.live
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 202152
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:44:57 GMT
expires: Fri, 28 Mar 2025 17:44:57 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Mar 2024 18:14:50 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 42189
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| spk-update.live/api/auth/session | 104.21.72.218 | 200 OK | 2 B |
URL GET HTTP/3spk-update.live/api/auth/session IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /api/auth/session HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://spk-update.live/
Content-Type: application/json
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:06 GMT
content-type: application/json; charset=utf-8
content-length: 2
set-cookie: next-auth.csrf-token=39e40d457fe1bfe8a1f505ff420c763d3e62325df2fcd0fda6d2ac085564f738%7C89484a6c363d64b0cd1a6f68f73961162d0eaf7924f92c504a2617013dfe0b08; Path=/; HttpOnly; SameSite=Lax
next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; Path=/; HttpOnly; SameSite=Lax
etag: "bwc9mymkdm2"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oXfFknuRrMJH4sqaChjFQSrfSoUSgis5yZ6EyI%2F8d8ycdbs3FvcctaIUwBi9widGKhbDjRpaqd%2F0fYiweD4GQQV6EYVV5EIKeeDFOFs4Pvds0X81C3kNJMgd8Vbx667Nl0Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd745d8a4c56be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/api/create-log | 104.21.72.218 | 200 OK | 15 B |
URL POST HTTP/3spk-update.live/api/create-log IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
Hash7cff57014657cdb14dc92ef6055f1555 57434199e223afc1f6e574643f4a6967e557898f 4acf4bd2b6164c5744482c94fa00985854a24b17c68eb31f97fe9254d44085de
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
POST /api/create-log HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://spk-update.live/
Content-Type: application/x-www-form-urlencoded
Content-Length: 130
Origin: https://spk-update.live
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=39e40d457fe1bfe8a1f505ff420c763d3e62325df2fcd0fda6d2ac085564f738%7C89484a6c363d64b0cd1a6f68f73961162d0eaf7924f92c504a2617013dfe0b08; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A%22%22%2C%22userId%22%3A20%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22%22%2C%22bankUrl%22%3A%22%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:07 GMT
content-type: application/json; charset=utf-8
content-length: 15
etag: "ueogvlqmkif"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=05H1IXS18yG2Gge5uL9lURn%2FiZuYoJeZHbHY2Ns%2BguPQUZ%2BrTasIqLcTGHJpyq2x%2FekHJZDBN0FlhjwKMLlIirlW5WxNuiZqZgl05ucBPaeuHnXCBcwM8pfPKjtHIGA8pwE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74622cc656be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/chunks/1bfc9850-4a72bd178e9802af.js | 104.21.72.218 | 200 OK | 10 kB |
URL GET HTTP/3spk-update.live/_next/static/chunks/1bfc9850-4a72bd178e9802af.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeJavaScript source, ASCII text, with very long lines (25635), with no line terminators Hashd0dc9153ebbb0370f8ebefa4611e8711 c7510ed81bd00542daab14e5ad2d778d2b4fb42b 6d53e4ec3f79eb2bc4123cebfa4df087ff0818e90636fbb2ccba9e5bd8835523
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/1bfc9850-4a72bd178e9802af.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"6423-18e7da93743"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=byWiu76SQR7PCWx3TpEaYqd6powhxf8lRBsJDbqHssT8JA5ZC0oxE4e9zSJIpAHvCgUbyaQICA3pWkFvIznYtifKMaHKPvmvV35w0%2FI%2FgwXheLiPEpF9yTVFLV%2B8yaT6c5A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74547e9156be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/api/get-start-step | 104.21.72.218 | 200 OK | 38 B |
URL POST HTTP/3spk-update.live/api/get-start-step IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
Hashcc034ca57497201c64b774633109ba34 5b6052297b0d6c0aaf0a364cd49a83e8fc1be65e c00f3ead8775866d90f5a979138b2c0c42d013905bc0bc5a8902bd5e8a7c3bb6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
POST /api/get-start-step HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://spk-update.live/
Content-Type: application/x-www-form-urlencoded
Content-Length: 28
Origin: https://spk-update.live
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=39e40d457fe1bfe8a1f505ff420c763d3e62325df2fcd0fda6d2ac085564f738%7C89484a6c363d64b0cd1a6f68f73961162d0eaf7924f92c504a2617013dfe0b08; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A%22%22%2C%22userId%22%3A20%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22%22%2C%22bankUrl%22%3A%22%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:08 GMT
content-type: application/json; charset=utf-8
content-length: 38
etag: "2s8hh0lcgw12"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FTA%2BB9EvfY6H3w%2FwDURKJfrZ84p7omX5QtX85pMWmRsp9kKks%2BrFQyiEaaqERywMg0r%2F43Oe2XHx%2BJ6vjkcfLo1blR7Xyd8fLQGLXEezRMcyAJ8ZJYA%2FvSvoeXMa1G2PCjc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74664e8456be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/chunks/pages/_app-01b6dfe15eedf080.js | 104.21.72.218 | 200 OK | 71 kB |
URL GET HTTP/3spk-update.live/_next/static/chunks/pages/_app-01b6dfe15eedf080.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeJavaScript source, ASCII text, with very long lines (65321) Hashde277a2b6363f2ef4308ec40a0a6fea2 0acaa5b9e81bc4a07b82b9c3b6a61d6f24f4d136 b1d937f7344d44d4a1431827927203b06d7a7092827b97327e2634c7805ea794
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/pages/_app-01b6dfe15eedf080.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"463bb-18e7da93743"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fWA3W%2F4jLIV3p81XlQpN9yMxOp2l3yZinFquh4ZOHHjCL5losegok%2F2Jj2L2GFT5Rt7aJRpFkj1ct5tA8GqXpzwfVIWsrWB1p6vSvt0cOHfg%2BjqTKMhQqU2AcbYAWYsnJVg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74546e8a56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/chunks/1a48c3c1-8530ceb7dc4b096d.js | 104.21.72.218 | 200 OK | 327 B |
URL GET HTTP/3spk-update.live/_next/static/chunks/1a48c3c1-8530ceb7dc4b096d.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeJavaScript source, ASCII text, with very long lines (583), with no line terminators Hash4b47916b67eceacf56bc8a54794fff48 ada2a0cf1d1efc3acd30f19a6377805b37f40a9c 59e255abfee85a39a9c2538bfbd07ad3de9da073909dd01df39d63774078b0a0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/1a48c3c1-8530ceb7dc4b096d.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"247-18e7da93743"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aN9erOVwCzMzjuHCv31%2FK2zNwtTJg47t1WOjidqmUrGZAExLvO1U9mT9owZZWg0SQrA5KSHOv3RibseYmg62Vpc8V79KPMRAixoOhQanOvslXdiK2678Td8gFIew7vkWgfM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74547e8b56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/api/get-start-step | 104.21.72.218 | 200 OK | 38 B |
URL POST HTTP/3spk-update.live/api/get-start-step IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
Hashcc034ca57497201c64b774633109ba34 5b6052297b0d6c0aaf0a364cd49a83e8fc1be65e c00f3ead8775866d90f5a979138b2c0c42d013905bc0bc5a8902bd5e8a7c3bb6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
POST /api/get-start-step HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://spk-update.live/
Content-Type: application/x-www-form-urlencoded
Content-Length: 28
Origin: https://spk-update.live
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=39e40d457fe1bfe8a1f505ff420c763d3e62325df2fcd0fda6d2ac085564f738%7C89484a6c363d64b0cd1a6f68f73961162d0eaf7924f92c504a2617013dfe0b08; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A219890%2C%22userId%22%3A20%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22sparkasse_93ab0f25-a57c-4f9d-9b2c-8992dcc59a4b%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Sparkasse%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fsparkasse.de%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:08 GMT
content-type: application/json; charset=utf-8
content-length: 38
etag: "2s8hh0lcgw12"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b0osfAdK6FEHepGgxOevrTr%2BK3s9us4lQUY5%2BeNEY7MTsWryNGMWR%2Fp8Ay1CLSg03OGCZjbOOpEC0IYkNdfkLD8nMnyLQh8aWeV7jK7mTC%2BMQgiF3vf6%2FaPobJV0B1on2vE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd746a783d56be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FLogoWhite.021e3e19.png&w=256&q=75 | 104.21.72.218 | 200 OK | 1.3 kB |
URL GET HTTP/3spk-update.live/_next/image?url=%2F_next%2Fstatic%2Fmedia%2FLogoWhite.021e3e19.png&w=256&q=75 IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeRIFF (little-endian) data, Web/P image Hash3ead13211cf4d29dc6fa9997a6b4a539 5650a7f821efe3516b49add492d3efaebadf7175 80de2436d2c385e379a393e3c5c2f1fc1948e6ba7d55b28c2b8bb08700891f1e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2FLogoWhite.021e3e19.png&w=256&q=75 HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Cookie: next-auth.csrf-token=39e40d457fe1bfe8a1f505ff420c763d3e62325df2fcd0fda6d2ac085564f738%7C89484a6c363d64b0cd1a6f68f73961162d0eaf7924f92c504a2617013dfe0b08; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22FILIALE%22%2C%22logId%22%3A219890%2C%22userId%22%3A20%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22sparkasse_93ab0f25-a57c-4f9d-9b2c-8992dcc59a4b%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Sparkasse%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fsparkasse.de%2F%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:08 GMT
content-type: image/webp
content-length: 1310
vary: Accept
cache-control: public, max-age=315360000, immutable
etag: gN4kNtLDheN5o5PjxcLx-BlI5rp9VbKMK4uwhwCJHx4=
content-disposition: inline; filename="LogoWhite.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
x-nextjs-cache: HIT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D30piDLfuFybAq%2BEbxMmofaSKgm4yoTDN8lzFFXuyqZbxopYfl1B6g6dhz%2FLp6vhZ59Q3%2FvgUdtnPeceIwWxgwOJj1cFiY8P5s%2Fsvs0FsmyRP0N8U3ybbQ5IpctDBHD19Uw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd746ae87556be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/fonts/Sparkasse/Sparkasse_web_Rg.woff | 104.21.72.218 | 200 OK | 25 kB |
URL GET HTTP/3spk-update.live/fonts/Sparkasse/Sparkasse_web_Rg.woff IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeWeb Open Font Format, TrueType, length 25076, version 0.0 Hashb1a37aec8a915b633ed040bab5213e3a 278d6e0d619204d1c74318c2c9d0c33dc9fa8abd 43a2c75ca73d8c1101ff7ae617e6dbc6934e8aa1cd72d64ce50908ac297156cb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /fonts/Sparkasse/Sparkasse_web_Rg.woff HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/_next/static/css/e807c5f3c7e39ea5.css
Cookie: next-auth.csrf-token=39e40d457fe1bfe8a1f505ff420c763d3e62325df2fcd0fda6d2ac085564f738%7C89484a6c363d64b0cd1a6f68f73961162d0eaf7924f92c504a2617013dfe0b08; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A219890%2C%22userId%22%3A20%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22sparkasse_93ab0f25-a57c-4f9d-9b2c-8992dcc59a4b%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Sparkasse%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fsparkasse.de%2F%22%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:09 GMT
content-type: font/woff
content-length: 25076
cache-control: public, max-age=14400
last-modified: Thu, 08 Dec 2022 14:39:06 GMT
etag: W/"61f4-184f22cff10"
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u3W6qvRq3KZp%2BR0X0D%2FdLYe0q%2BWVTzvDlGZtttORG8TQ8P1rQZ0CJ6xrl753xEmb5yNzOocws5bBt2weAjoQS61W575vfkARW8%2BquyxVY9FjH4%2B%2FG6%2BIEiHUcBlVgOyX7ZQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd746ab85956be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/fonts/Sparkasse/SparkasseHead_web_Rg.woff | 104.21.72.218 | 200 OK | 26 kB |
URL GET HTTP/3spk-update.live/fonts/Sparkasse/SparkasseHead_web_Rg.woff IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeWeb Open Font Format, TrueType, length 26076, version 0.0 Hashe05e5d13fbc4a11f61ac1628729d3187 318c1d7cae7f8d67fe7b854204161ed0de27b872 addffd48c2bb1fe1e4409899c79d5b2beca7d72c4d80575401091f09ab0eae52
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /fonts/Sparkasse/SparkasseHead_web_Rg.woff HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/_next/static/css/e807c5f3c7e39ea5.css
Cookie: next-auth.csrf-token=39e40d457fe1bfe8a1f505ff420c763d3e62325df2fcd0fda6d2ac085564f738%7C89484a6c363d64b0cd1a6f68f73961162d0eaf7924f92c504a2617013dfe0b08; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A219890%2C%22userId%22%3A20%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22sparkasse_93ab0f25-a57c-4f9d-9b2c-8992dcc59a4b%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Sparkasse%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fsparkasse.de%2F%22%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:09 GMT
content-type: font/woff
content-length: 26076
cache-control: public, max-age=14400
last-modified: Thu, 08 Dec 2022 14:38:35 GMT
etag: W/"65dc-184f22c85f8"
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8s1DQfu5Y%2FIUb3XCskIHQw47ZAbWUV2oxo9OtxY8WCjBP38NK4GEmw8WkjIckZyy3R22zC%2FL720sDn7UaxgXgdI5mef6ZrW73HRWLCs%2BX1HIfST3DxjlCgGbnJ%2BxfGitnqU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd746ab85856be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/fonts/Sparkasse/Sparkasse_web_Md.woff | 104.21.72.218 | 200 OK | 25 kB |
URL GET HTTP/3spk-update.live/fonts/Sparkasse/Sparkasse_web_Md.woff IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeWeb Open Font Format, TrueType, length 25248, version 0.0 Hash5bc06337fb487ad72bca567af5089c65 a3e876927b4fa9a670db74a12bfacea2aca7e27d 7b2888ded6c1e95affe8813aaba8fbcd060d774451c10afa71227616e9af159f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /fonts/Sparkasse/Sparkasse_web_Md.woff HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/_next/static/css/e807c5f3c7e39ea5.css
Cookie: next-auth.csrf-token=39e40d457fe1bfe8a1f505ff420c763d3e62325df2fcd0fda6d2ac085564f738%7C89484a6c363d64b0cd1a6f68f73961162d0eaf7924f92c504a2617013dfe0b08; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A219890%2C%22userId%22%3A20%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22sparkasse_93ab0f25-a57c-4f9d-9b2c-8992dcc59a4b%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Sparkasse%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fsparkasse.de%2F%22%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:09 GMT
content-type: font/woff
content-length: 25248
cache-control: public, max-age=14400
last-modified: Thu, 08 Dec 2022 14:38:59 GMT
etag: W/"62a0-184f22ce3b8"
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bua%2BdiglDO5cULG8ffpO70Lze9wDmw87lVSDN78ilHKyR%2BbpNIrl%2FBi0zMnW9Tl2Z8%2BA4Oimnrr%2Ftnf0cDmUGw327dzbtZEYYvU3ppCszmY67644HFN81ln7fk%2FqQco%2FiB4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd746ac86456be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/fonts/Sparkasse/Sparkasse_web_Bd.woff | 104.21.72.218 | 200 OK | 25 kB |
URL GET HTTP/3spk-update.live/fonts/Sparkasse/Sparkasse_web_Bd.woff IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeWeb Open Font Format, TrueType, length 25204, version 0.0 Hash3c9288223036c20cfdfa596719504cd5 81302d27ee414265631a871a5c3cd14304c0f087 9ae3f33664fc3b273913900b81d8812d5a6a3c098b86d93d1f0ec54259d9441d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /fonts/Sparkasse/Sparkasse_web_Bd.woff HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/_next/static/css/e807c5f3c7e39ea5.css
Cookie: next-auth.csrf-token=39e40d457fe1bfe8a1f505ff420c763d3e62325df2fcd0fda6d2ac085564f738%7C89484a6c363d64b0cd1a6f68f73961162d0eaf7924f92c504a2617013dfe0b08; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A219890%2C%22userId%22%3A20%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22sparkasse_93ab0f25-a57c-4f9d-9b2c-8992dcc59a4b%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Sparkasse%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fsparkasse.de%2F%22%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:09 GMT
content-type: font/woff
content-length: 25204
cache-control: public, max-age=14400
last-modified: Thu, 08 Dec 2022 14:38:52 GMT
etag: W/"6274-184f22cc860"
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=evj6SVM4r1c3qH2lMmD8NWqAwJabVm4RwnJjCeABxkPBYCl8SqZzncY5oYKm1w9uroR%2BO4TVr4HNKVwKp4rCTZiwTI0AoOTEyJesjj%2Fcmp%2FiUHHcqeoYBjc%2BH5mpDW8IIc0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd746ac86956be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/chunks/29107295-2c4ccc922958d76c.js | 104.21.72.218 | 200 OK | 27 kB |
URL GET HTTP/3spk-update.live/_next/static/chunks/29107295-2c4ccc922958d76c.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65344), with no line terminators Hashe39d120aab2ca5fd9874c826e74e55b3 d290f4d3d1a788ffd67d3c4d01ab2c49f442344a 4036b734ca2db6230ee1b24ced5186ba5232df14aff5c0e33178c6283c458664
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/29107295-2c4ccc922958d76c.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"144a3-18e7da93747"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YZGLfqt91ZFUtg85HwVd6N6e5nmzGw9W4uHDcDoFrf5LjcfL%2Fm2IbNAg5M14if2JdV%2Fowj0%2FxWtkNU%2ByEgWf%2FUNQrTrGnZve4X1w8jXVjzE2mNw80In%2BlU1M6TrS82XQkY0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74547e9356be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/api/backend/sessions/ping | 104.21.72.218 | 200 OK | 16 B |
URL POST HTTP/3spk-update.live/api/backend/sessions/ping IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
Hash7363e85fe9edee6f053a4b319588c086 a15e2127145548437173fc17f3e980e3f3dee2d0 c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
POST /api/backend/sessions/ping HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://spk-update.live/
Content-Type: application/x-www-form-urlencoded
Content-Length: 84
Origin: https://spk-update.live
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=39e40d457fe1bfe8a1f505ff420c763d3e62325df2fcd0fda6d2ac085564f738%7C89484a6c363d64b0cd1a6f68f73961162d0eaf7924f92c504a2617013dfe0b08; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22FILIALE%22%2C%22logId%22%3A219891%2C%22userId%22%3A20%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22sparkasse_123f4a75-8bb7-4e8c-9f74-9a988868ac70%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Sparkasse%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fsparkasse.de%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:12 GMT
content-type: application/json; charset=utf-8
content-length: 16
etag: "17a6zzdutk1g"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XXrSUVw1hpaUrCv90yMtMjY5ItPB0QE7TKC1BvSXXMVYzfGcIb9Tt1WQSikObewnfqlZeQOVRgRj%2BXXJhr%2FdkdEXvw5WOvNmyzXRgO02%2Bj5hW3mzSmiAyhrmmsljSazrQbg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd7481b97556be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/css/1fbe2e0c7e8b651e.css | 104.21.72.218 | 200 OK | 18 kB |
URL GET HTTP/3spk-update.live/_next/static/css/1fbe2e0c7e8b651e.css IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeUnicode text, UTF-8 text, with very long lines (17700), with no line terminators Hash6fa7506165611d2f3b23efae29a9a130 c4936d2244c304df1ce257e9a3d5e0251f6d4c5d 84fd52cba82f9c225e709a2ed7646d3565c4b8b37ac89dfd8e43bf4224eda54c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/css/1fbe2e0c7e8b651e.css HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://spk-update.live/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"453e-18e7da93743"
vary: Accept-Encoding
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vk043r4Q3x3ChX2LuaNoOPZWP%2BGB0SPzUhsJLEPDnKi1JR1QcYCoEwDMuCK5fz62JkPpjLFsGfAfbBZlfLbYpcv7kJYa8Nl%2FqW58iWaN1TaUUU9%2B2nVqPbyoE2L8IMeBdtI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd745d3a2d56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/chunks/6807-0c25e785662cc5e3.js | 104.21.72.218 | 200 OK | 14 kB |
URL GET HTTP/3spk-update.live/_next/static/chunks/6807-0c25e785662cc5e3.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (27677), with no line terminators Hash57f183aa37e8ac1d4536fd944027c974 e577bc3f7acc700b9481a8b58b1d01502b779f5a 99eea7e032d1d8df6cfb1caaa2fdc9ee3833e5c4861a875a41c18875ec62733b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/6807-0c25e785662cc5e3.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"6c39-18e7da93747"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GVWpB9zDLQT9JlDgfdIP4stq0ppCm%2B%2FQ1wUKReDO23h1Orn6wKMhfRqiwJfs%2B1h6UlzSVcIE7bMnSGjKN7MMelSZ0rNyav4O5H5%2FBY%2F%2Fo%2BWDHGcOVOMXK6rOPBJEveGq6ZE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74548eab56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/api/backend/sessions/ping | 104.21.72.218 | 200 OK | 16 B |
URL POST HTTP/3spk-update.live/api/backend/sessions/ping IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
Hash7363e85fe9edee6f053a4b319588c086 a15e2127145548437173fc17f3e980e3f3dee2d0 c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
POST /api/backend/sessions/ping HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://spk-update.live/
Content-Type: application/x-www-form-urlencoded
Content-Length: 84
Origin: https://spk-update.live
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=39e40d457fe1bfe8a1f505ff420c763d3e62325df2fcd0fda6d2ac085564f738%7C89484a6c363d64b0cd1a6f68f73961162d0eaf7924f92c504a2617013dfe0b08; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22FILIALE%22%2C%22logId%22%3A219891%2C%22userId%22%3A20%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22sparkasse_123f4a75-8bb7-4e8c-9f74-9a988868ac70%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Sparkasse%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fsparkasse.de%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:15 GMT
content-type: application/json; charset=utf-8
content-length: 16
etag: "17a6zzdutk1g"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YGRQCX5gmjNp0UR1c4OClGo2IianSXRXIXQ36MsbGJ%2Bq5df1iESqp%2B330aV2bbej1x5iSYbPfArUT%2BcSSoeUHUC5gbdarbY4STCYJbVvIMkCRxKLr8Z29A2rLJ8dXmB8Wwo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74947fbd56be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/chunks/2037-053a15e14c9db20c.js | 104.21.72.218 | 200 OK | 8.0 kB |
URL GET HTTP/3spk-update.live/_next/static/chunks/2037-053a15e14c9db20c.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeJavaScript source, ASCII text, with very long lines (11608), with no line terminators Hash0ca9a623fb4113bdc1e2477407c17f29 4c7fed05e0f2a2ac5dd565001e6d27ac17859ab3 527ac89365522eedb6b0575025d9914b029a8c88262e2bd38a6320e738b59432
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/2037-053a15e14c9db20c.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"2d58-18e7da93747"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w2SwAB4EbUyu5RCyzZEJ8N%2BQHnvG1cDuCoUuIvFyN1QwiKcmn1FqwGq%2Bbg68bBz3Fxm0rA%2F22CV%2BNxZTNbgS5yt3xgETG%2FCuDcvpCG99Yl7CFxPFyflPHRit1hUQqr4gtQ8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74548ea956be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/api/create-log | 104.21.72.218 | 200 OK | 288 B |
URL POST HTTP/3spk-update.live/api/create-log IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
Hash769fe71f15f42469ca0df51e8a4e54c9 628efdcb1c67f04a083f9e3d663ce5b24b8c954e 31cec378d1e0590d5d4d2f9430b04c825a6582bb0af76650c0100869f6b118e1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
POST /api/create-log HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://spk-update.live/
Content-Type: application/x-www-form-urlencoded
Content-Length: 130
Origin: https://spk-update.live
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=39e40d457fe1bfe8a1f505ff420c763d3e62325df2fcd0fda6d2ac085564f738%7C89484a6c363d64b0cd1a6f68f73961162d0eaf7924f92c504a2617013dfe0b08; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A%22%22%2C%22userId%22%3A20%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22%22%2C%22bankUrl%22%3A%22%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:07 GMT
content-type: application/json; charset=utf-8
etag: W/"je2gbq1kbrd8"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VvVvvE2hsOcHQG7TYYh0OujloabQn59TibSvjNS4%2BbIERqag0mFH8JSRVzgV6zZUWA2yFkgLIGa5AFtuJKmvVFemGgp%2Bx%2BerZbYM%2B1HWjp%2Fu7p6gOB76gn1%2BThbKf2dv0nA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74622cc256be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/dHHbstlSFRhBRBJxUNpvy/_buildManifest.js | 104.21.72.218 | 200 OK | 1.6 kB |
URL GET HTTP/3spk-update.live/_next/static/dHHbstlSFRhBRBJxUNpvy/_buildManifest.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeASCII text, with very long lines (3720), with no line terminators Hashdb35db7e94e500d522eedc3ab2243a0a e5755423418c6572dc81aeac6819b01be7960a5a 927f364012a2cfb6f761798be43b032c90832085bf98ecc6dc1321acee8f80ef
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/dHHbstlSFRhBRBJxUNpvy/_buildManifest.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"e88-18e7da93743"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YvY%2FNlp8qhq64BThvhJWLoSoRXzrq8R8JIXgpNde18xnk%2B6RK2FNlt1cNZpoRE7RIjPXb5OlGuKdxGtciPzO1FMGp0RtYAuHvIRAVSF%2FGFEXie5jU169RT1oTjjqg8WG8fs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74549eb056be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/api/backend/sessions/ping | 104.21.72.218 | 200 OK | 16 B |
URL POST HTTP/3spk-update.live/api/backend/sessions/ping IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
Hash7363e85fe9edee6f053a4b319588c086 a15e2127145548437173fc17f3e980e3f3dee2d0 c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
POST /api/backend/sessions/ping HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://spk-update.live/
Content-Type: application/x-www-form-urlencoded
Content-Length: 84
Origin: https://spk-update.live
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=39e40d457fe1bfe8a1f505ff420c763d3e62325df2fcd0fda6d2ac085564f738%7C89484a6c363d64b0cd1a6f68f73961162d0eaf7924f92c504a2617013dfe0b08; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22FILIALE%22%2C%22logId%22%3A219891%2C%22userId%22%3A20%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22sparkasse_123f4a75-8bb7-4e8c-9f74-9a988868ac70%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Sparkasse%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fsparkasse.de%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:24 GMT
content-type: application/json; charset=utf-8
content-length: 16
etag: "17a6zzdutk1g"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BQJkDgOPJHZJ5fLLtlSHXxB8tTy9opQOZc6Io%2FKZ8RyVvUwW%2FszbMg%2Fse7y0Oo7Gi4FJM2hQxgNlhTjWa2TDMwDKq%2FFLkYsymttm5VTkSf3USQ8krzqYu5mQyoNPJkrx51U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74ccb9b856be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/api/backend/sessions/ping | 104.21.72.218 | 200 OK | 16 B |
URL POST HTTP/3spk-update.live/api/backend/sessions/ping IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
Hash7363e85fe9edee6f053a4b319588c086 a15e2127145548437173fc17f3e980e3f3dee2d0 c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
POST /api/backend/sessions/ping HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://spk-update.live/
Content-Type: application/x-www-form-urlencoded
Content-Length: 84
Origin: https://spk-update.live
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=39e40d457fe1bfe8a1f505ff420c763d3e62325df2fcd0fda6d2ac085564f738%7C89484a6c363d64b0cd1a6f68f73961162d0eaf7924f92c504a2617013dfe0b08; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22FILIALE%22%2C%22logId%22%3A219891%2C%22userId%22%3A20%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22sparkasse_123f4a75-8bb7-4e8c-9f74-9a988868ac70%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Sparkasse%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fsparkasse.de%2F%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:27 GMT
content-type: application/json; charset=utf-8
content-length: 16
etag: "17a6zzdutk1g"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2IQK3AT9DXEELw%2FKDBunG2woji2JYEVQN%2Fiu0JDFrIiu8sPjFdGJZvCjyqDz5veuO2dp0OkuQhxBRbXGzE%2FtMyeZ6s5%2FVoBH1Ao%2B4AI6csvoAoyyGuIP%2FVC%2F5RasPKZ046I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74df7ad556be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/chunks/5675-6a3de6baea750189.js | 104.21.72.218 | 200 OK | 9.7 kB |
URL GET HTTP/3spk-update.live/_next/static/chunks/5675-6a3de6baea750189.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeJavaScript source, ASCII text, with very long lines (9900), with no line terminators Hashed702d077be8b6ec27d3d47684bb23bb 8174be4c53239e6414d763fc52b84129f5802dd9 da63c119007454de1c396426833f5d5c5843459e8d0e30f6115cff0566d0cbcc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/5675-6a3de6baea750189.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"25d4-18e7da93747"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ft5c61%2F8yo4%2B555djAmBHH0TIDhmNUl3bV%2FgeP1NommgDwbPTkarSYH2cmFYKkGmMp3WdOB%2FGsXGJgIxxCziaeHfVRGZzCRY4g6i6rmz032pBtRcdNv5k4aKMVv8RqO%2BgY8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74548e9e56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LdGsKQpAAAAAPQ1q5hchzPr_8EdfyCVPo7tuCnJ&co=aHR0cHM6Ly9zcGstdXBkYXRlLmxpdmU6NDQz&hl=en&type=image&v=Hq4JZivTyQ7GP8Kt571Tzodj&theme=light&size=normal&badge=bottomright&cb=2f2g5ptdwl2y | 142.250.74.164 | 200 OK | 46 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/anchor?ar=1&k=6LdGsKQpAAAAAPQ1q5hchzPr_8EdfyCVPo7tuCnJ&co=aHR0cHM6Ly9zcGstdXBkYXRlLmxpdmU6NDQz&hl=en&type=image&v=Hq4JZivTyQ7GP8Kt571Tzodj&theme=light&size=normal&badge=bottomright&cb=2f2g5ptdwl2y IP142.250.74.164:443
CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint23:75:5E:3D:EA:9F:A0:42:86:8D:14:AE:43:04:F0:B2:91:0B:DA:CF ValidityMon, 26 Feb 2024 08:03:58 GMT - Mon, 20 May 2024 08:03:57 GMT
File typeHTML document, ASCII text, with very long lines (37172) Hash02ed9bb44122e690bf01f684412597db 31f411a2e1198f2dbbcbb487d3f7b923b62238c6 f2b5f5b7ff040729975b96be1b158425c695c1b40473b2e0dcfc29fc7251aa2a
GET /recaptcha/api2/anchor?ar=1&k=6LdGsKQpAAAAAPQ1q5hchzPr_8EdfyCVPo7tuCnJ&co=aHR0cHM6Ly9zcGstdXBkYXRlLmxpdmU6NDQz&hl=en&type=image&v=Hq4JZivTyQ7GP8Kt571Tzodj&theme=light&size=normal&badge=bottomright&cb=2f2g5ptdwl2y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 29 Mar 2024 05:28:06 GMT
content-security-policy: script-src 'nonce-2Xt_aAkZSfKp6HdPvFoZpw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| spk-update.live/api/domain-info | 104.21.72.218 | 200 OK | 791 B |
URL POST HTTP/3spk-update.live/api/domain-info IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typetroff or preprocessor input, Unicode text, UTF-8 text, with very long lines (917), with no line terminators Hash25092ddfc27a51bfd0a69606246424c8 54e5ce4d54fa60eead645b4e1d6d3d448d3d84d2 79b6ce96922cb6208fbc77a0e0c7cb1f523c991c98db6db39b433cf85c9940c4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
POST /api/domain-info HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://spk-update.live/
Content-Type: application/x-www-form-urlencoded
Content-Length: 24
Origin: https://spk-update.live
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=39e40d457fe1bfe8a1f505ff420c763d3e62325df2fcd0fda6d2ac085564f738%7C89484a6c363d64b0cd1a6f68f73961162d0eaf7924f92c504a2617013dfe0b08; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A%22%22%2C%22userId%22%3A0%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22%22%2C%22bankUrl%22%3A%22%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:07 GMT
content-type: application/json; charset=utf-8
etag: W/"12ipt93cehlx"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rEj7APjb20xXeB6izKiKCnza7T%2FHnWfJ099aglL7t1PE9IIiPolRqJUWRrg7GKgzr8s%2B72iqhLUDearx3k3ShMKwXwR7tVwjv6n1GB93GjNh0AzsCJDYZNmbfZyS%2BFHWf%2FA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74620cb456be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/Sparkasse.ico | 104.21.72.218 | 200 OK | 4.3 kB |
URL GET HTTP/3spk-update.live/Sparkasse.ico IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Hash96cbd1e75e96f76131d6dea46f6c84d7 a93258f218d272f11a8c68999beb901a9676ce37 489457bd142e708c03236d71f4aee3739fa5d7ecf6d6c9db2a61417b0ce0aadd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /Sparkasse.ico HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Cookie: next-auth.csrf-token=39e40d457fe1bfe8a1f505ff420c763d3e62325df2fcd0fda6d2ac085564f738%7C89484a6c363d64b0cd1a6f68f73961162d0eaf7924f92c504a2617013dfe0b08; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22FILIALE%22%2C%22logId%22%3A219891%2C%22userId%22%3A20%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22sparkasse_123f4a75-8bb7-4e8c-9f74-9a988868ac70%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22Sparkasse%22%2C%22bankUrl%22%3A%22https%3A%2F%2Fsparkasse.de%2F%22%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:09 GMT
content-type: image/x-icon
cache-control: public, max-age=14400
last-modified: Tue, 08 Nov 2022 13:11:50 GMT
etag: W/"10be-184575e51f0"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wT8Mkd%2FzKzTicFyB4TmXueIwTlV0vW2LrXDKwh4hGToZeKchO%2B%2BEN0YZ5q6hqSpi%2BpWtSP%2Fd1smHbiwLFrGUD6MWULpy1QNQhn4e%2B7rcQmLcrER6juo01wifTB7qqOlzQNw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74718b2556be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/css/e807c5f3c7e39ea5.css | 104.21.72.218 | 200 OK | 75 kB |
URL GET HTTP/3spk-update.live/_next/static/css/e807c5f3c7e39ea5.css IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeASCII text, with very long lines (58123), with CRLF, LF line terminators Hashf0e982c31e7c7896da1bff3fb64f0360 9a29366b53cc572b6c083842b03313c9cff42bda ea15d264570e87d07f01ae4b98eb9e7e947e5b7baf4be66bcc8767cdbe7c8c4b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/css/e807c5f3c7e39ea5.css HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"12599-18e7da93743"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hbqYirS7fhE%2F3QdARjD2hnS2HpHyLUC8g%2FgRwjFW5iApqtPNQyzG0UyDUDIgfWUqqdc5QyEwiFFMxo0Yu3wIYZrIhHI2PGk%2FONJcwHYNYEK1Y1xpVbNXJYb6MYuF1cg7wP8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74546e8256be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/chunks/31664189-79b418c8cfec1276.js | 104.21.72.218 | 200 OK | 714 B |
URL GET HTTP/3spk-update.live/_next/static/chunks/31664189-79b418c8cfec1276.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (734), with no line terminators Hash53a315d4867c37095467b89121195726 de2ed840e19669f7bba96ee25b016db45ebd3498 a707c2a5f0f3f8574b4059aab20b9f59a88be9546984233b4ca180615a442b3f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/31664189-79b418c8cfec1276.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"2ca-18e7da93747"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BKgWVpv%2FPREKCuCysTlyexv6i7HSkDnhoA1ODUrudoykenQ2n0l%2BROQstB930iF9ddpLzW8dsxSaLVe0pCezVAB8%2FU2xmIePHLfHIV6c7SalWR51zrpd89C7yimzfm%2FQtfc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74547e9a56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/chunks/6893-dfa84fada077ab50.js | 104.21.72.218 | 200 OK | 4.1 kB |
URL GET HTTP/3spk-update.live/_next/static/chunks/6893-dfa84fada077ab50.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeJavaScript source, ASCII text, with very long lines (4334), with no line terminators Hash1296ce6348d0700cb51064ad40d57a34 e1b30525443b5cba3eeed718dd21404315bb6203 bb8d36f36201501b4a868eeaebf99f34a29be49733ce96c6318628421fd6c6b5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/6893-dfa84fada077ab50.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"ffc-18e7da93747"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BP5IC02X9EzXwTk41qgSiHbc1FzZeLhJ%2BswJRRyz%2BiJ3mluEKUUnS3pkDsjPqSVHXzrgqW%2Bhtcwt1VpETvnVKRNrVkE6pXIVWQM2tA%2FYOXnuVOM3c7o3ST1UN7t8NoBeMwM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74547e9d56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/Multibank.ico | 104.21.72.218 | 200 OK | 15 kB |
URL GET HTTP/3spk-update.live/Multibank.ico IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeMS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel Hasha3560dba194daf8efab745fa88ea91bd 70bd0c989530c18f3b0f2140443f63eee8218cb2 0c0d890398f5e66f3b3c16c8398e6c2b2308d3973c9e509430f1b224ca370374
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /Multibank.ico HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:07 GMT
content-type: image/x-icon
cache-control: public, max-age=14400
last-modified: Thu, 28 Dec 2023 16:49:14 GMT
etag: W/"3aee-18cb1547f10"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TSiSXC4ClrGzQHjTsW8CSgu9pSvBAtSvtDV7p45jc5%2FoPKld%2FubRT1O3lChBWmIr%2FJvpxdxPWfLq81lUe1BBl0TbzQpyFu%2FXVC2a8sMRY2hV4iV5wl7yfW7n0wSUOb054dg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd745f4b2d56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/chunks/2962-b304c7a096b6845a.js | 104.21.72.218 | 200 OK | 11 kB |
URL GET HTTP/3spk-update.live/_next/static/chunks/2962-b304c7a096b6845a.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeJavaScript source, ASCII text, with very long lines (11317), with no line terminators Hash6ffb2f4ee1e93e270a15cbc056d5a329 65507eaec7544455fb6066c90a49e89f621b3936 8d95177400e3b6cf44bb7baa71de6bfa9c6ba155cf0b844b5a0685136d763034
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/2962-b304c7a096b6845a.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"2c35-18e7da93747"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mG6ac4ga%2BowntRJko8SUt78EyJuzaxVBG%2FC4fGdPmkQw7TbBu1vX8iGuw%2BLunVzeiHgBspd9DQmgObCHwKdsidbQau3k2J0hSKR%2BRcGiwYnox6toGFiQvgpcp2TyhkSO06Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74547e9c56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| | 104.21.72.218 | 200 OK | 3.2 kB |
URL User Request GET HTTP/2IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeHTML document, ASCII text, with very long lines (3444), with no line terminators Hash0d49afc88b927613657a0b4b0269aa74 8b6f4a49757a07caa7c76b2183e0a81770fb4461 0586815a859767a3dc13e942bf11eb6968b15aca6495c20a6a6c7b0c19f93737
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET / HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 29 Mar 2024 05:28:04 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YA9knEV0bommAyQbTmS6TafXIqwA12QYdws8qcCfHIQ5wxin6ROIYdqTnOeMEZ9oTsvZY77%2FX%2FnK3GHuR5NwKkRSEVuvV5qfOjucm8kZoFBRmz8vM3zGl6aH%2FbwEPBZK4Fs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd744e8dbc5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| spk-update.live/_next/static/chunks/1e7c12d4-9caf7dccb6a1d25b.js | 104.21.72.218 | 200 OK | 765 B |
URL GET HTTP/3spk-update.live/_next/static/chunks/1e7c12d4-9caf7dccb6a1d25b.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (775), with no line terminators Hash64f088244663223776fa2f4cbe474efe bda771813e9c111bcd8fb312d65c55ac11a83d76 6c9ce97d6b267c891699b4412d1e657b203213d4c1a77f1842b41208c7d3f626
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/1e7c12d4-9caf7dccb6a1d25b.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"2fd-18e7da93747"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dETtLlxBGsS6Fadk9%2Fw1EyMD66w7xwqrh%2FLBZmJbt4qv8jMuq1dmJY%2FWFULGriADVSZ7MFHMn%2BSTFmlK15tWaQG9leEaI4gEuSswDPzPbQ8JR3uxXYWtYesngkZRXlpview%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74547e9456be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/chunks/252f366e-a5a6f702cd6dba34.js | 104.21.72.218 | 200 OK | 2.1 kB |
URL GET HTTP/3spk-update.live/_next/static/chunks/252f366e-a5a6f702cd6dba34.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (2192), with no line terminators Hash26e0b08b5108a63ad9966478742e0b5c 7864e975e7e5f6ab7ce0ed5ac551d13c707e87d9 148a8f3ecab2a08fd370723dbd5d94577ffe96ffe34390f8de5e8991d96b4a23
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/252f366e-a5a6f702cd6dba34.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"848-18e7da93743"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hHBUXjv%2BEfrk9xyToQ4OvPfgJ13KzxXQQN3bc7e9pstydi3fqgLiLOELEWwDuljXOm%2F9%2FyHS45EPAXDNRMy0JchrPkGaXW1PAjoJrPGTSBBr%2B5KrG8c1OPngJzc%2Be3tsCNA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74547e8e56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/chunks/9892-99c1b6d658eb1ae4.js | 104.21.72.218 | 200 OK | 138 kB |
URL GET HTTP/3spk-update.live/_next/static/chunks/9892-99c1b6d658eb1ae4.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
Size138 kB (138281 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/9892-99c1b6d658eb1ae4.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"21c29-18e7da93747"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1EBFsW6798GIe1lregcqI1yuoDKzMC6viiylElHms9pZNjUP6nBz9TlPNiS%2FR8xnkLxP1UtpT6bh%2FAr%2FleWUXbMc2OtXWsiQ4oVCKjAwb7YkKEN7TY%2B4OEVKZmBbx2ysi80%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74548ea156be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/chunks/main-5cdcbd6d49f31693.js | 104.21.72.218 | 200 OK | 115 kB |
URL GET HTTP/3spk-update.live/_next/static/chunks/main-5cdcbd6d49f31693.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size115 kB (115356 bytes) Hash67a5f43e27387e109798e51e202f1fbf 35779062b631d8191ddd1074a64e7acff545fb04 bbd4ef3d1bd496891e8aacba12eae63711c3c8c807138d1a973490964d1828e1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/main-5cdcbd6d49f31693.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"1c29c-18e7da93743"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VON9W6AwT6t7c7QBaKJjpaiOtV1sV4QwBR88unGBpTUIUfcXTIw69qL3NLbJ71VIti2%2F4vh7wM%2BoMoIzt7r2UMBLxTU0GnVgg%2Bff5BLFIAdZDx8VuzrLh45UAkwp86f6G84%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74546e8856be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/dHHbstlSFRhBRBJxUNpvy/_ssgManifest.js | 104.21.72.218 | 200 OK | 77 B |
URL GET HTTP/3spk-update.live/_next/static/dHHbstlSFRhBRBJxUNpvy/_ssgManifest.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeASCII text, with no line terminators Hashb6652df95db52feb4daf4eca35380933 65451d110137761b318c82d9071c042db80c4036 6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/dHHbstlSFRhBRBJxUNpvy/_ssgManifest.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"4d-18e7da93743"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bAf08ow0t7Ez7PDrFo%2FkJWiB%2BsDNWWRZwtCKmOCaUhR2eBmA4xHDghlk%2BDv%2FDfApr3oxg5nSgphx9do%2Br8ONXBpTfPCwjPCRBAtdcG%2BNotU3Z6hPapMxZgt%2Ff8VuLsXZ%2FGk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74549eb256be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/recaptcha/api.js?onload=onloadcallback&render=explicit | 142.250.74.164 | 200 OK | 909 B |
URL GET HTTP/2www.google.com/recaptcha/api.js?onload=onloadcallback&render=explicit IP142.250.74.164:443
CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com Fingerprint32:A3:19:7A:6B:D5:C7:5E:CA:7C:C8:08:79:14:56:FD:FC:3E:06:F0 ValidityMon, 26 Feb 2024 08:18:59 GMT - Mon, 20 May 2024 08:18:58 GMT
File typeJavaScript source, ASCII text, with very long lines (909), with no line terminators Hash6770bf89e03f2fc419ffb99feae1612b 678cbe0892053fcce9b7524ed35c897cd2f4bbec a6ca13c8abd223ea2cd15fc1d81c8ff303531fa2f948c999a1293aec5fd5aac8
GET /recaptcha/api.js?onload=onloadcallback&render=explicit HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Fri, 29 Mar 2024 05:28:06 GMT
date: Fri, 29 Mar 2024 05:28:06 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| spk-update.live/_next/static/chunks/pages/index-6d6013da6e59084d.js | 104.21.72.218 | 200 OK | 310 kB |
URL GET HTTP/3spk-update.live/_next/static/chunks/pages/index-6d6013da6e59084d.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
Size310 kB (309467 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/pages/index-6d6013da6e59084d.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"4b8db-18e7da93743"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FpqBIOh%2FnXayTagW8MjL1e2Eh65LP6IIejbBRzV0u%2FDR%2Fj6lL2aJkSTI4zqTaKs9mzqpQH02dEWl2ECfKRtEl6IHJP2oRhtocVYeIdLpJKzmgzpyFB4ZVGjsmH9wJ13haFY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74548ead56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/chunks/framework-5666885447fdc3cc.js | 104.21.72.218 | 200 OK | 141 kB |
URL GET HTTP/3spk-update.live/_next/static/chunks/framework-5666885447fdc3cc.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typeJavaScript source, ASCII text, with very long lines (65201) Size141 kB (141048 bytes) Hash6f78840188652a255488524ba24b694c 5d30199ed324bca3850cb0ba2e002ca8bbd63328 39905d3d4badf88532fdc2aa18cb6fc26c57382caa8a05fe0a8365b70fc2eb8f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/framework-5666885447fdc3cc.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"226f8-18e7da93743"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xjzuj6iXpAzUwfVGBpF0qXkLimAuPwnUtxUeS23adJX4l2A32rTrMp8yE9ijfRH2VjAD1Z3mwhOkTQKdR%2FxjZ4n%2BMxv0tZYlVw%2F2nHgrlp5xTxdGDHBGtAFXIQeQri7KOhU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74546e8756be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/chunks/0c428ae2-442b49a45486c6c4.js | 104.21.72.218 | 200 OK | 1.1 kB |
URL GET HTTP/3spk-update.live/_next/static/chunks/0c428ae2-442b49a45486c6c4.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (1127), with no line terminators Hashd7cb6b53de7cd7fbb27f453943726a38 0b3b036584b5475bf3a9da1c6f0918295a78c45a eb942c119f864efa35b3b7f92cb4725b6e07dae1184d7662b408cc8aa905c5d0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/0c428ae2-442b49a45486c6c4.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"441-18e7da93747"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ADgVgngAt%2Bt6DdRxYMqR5jcvHVZBgYdszceKktxuzKjXr3%2FmQmv%2Ff%2FqaY0crwzwne2GXlYwbzuxi64KiUNxUc9jDsMo5mvsxqDshqW4sCF%2FjdtmHXUQW82RotFmqvSqc8og%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74547e9b56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/api/domain-info | 104.21.72.218 | 200 OK | 791 B |
URL POST HTTP/3spk-update.live/api/domain-info IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typetroff or preprocessor input, Unicode text, UTF-8 text, with very long lines (917), with no line terminators Hash25092ddfc27a51bfd0a69606246424c8 54e5ce4d54fa60eead645b4e1d6d3d448d3d84d2 79b6ce96922cb6208fbc77a0e0c7cb1f523c991c98db6db39b433cf85c9940c4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
POST /api/domain-info HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://spk-update.live/
Content-Type: application/x-www-form-urlencoded
Content-Length: 24
Origin: https://spk-update.live
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:06 GMT
content-type: application/json; charset=utf-8
etag: W/"12ipt93cehlx"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cXF%2BgpCGmo%2FkExz9Hp0DEaaAHJAo69OTmRwPF%2BxeaYvs1xqQMRpg6Y7UsJS0IgqKJGi8AanAAXyc1LK9ney4dUsBj0kX4kveFjt%2FXBlMC7dHMCG6N0BvHbK4mmUE1d4NtLo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd745d8a4b56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/api/traffic | 104.21.72.218 | 200 OK | 15 B |
URL POST HTTP/3spk-update.live/api/traffic IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash0c94331995eb82a8d741bd881c12fe52 7b35092dbe8c7f967dd083a81db2e41dc50839f4 d56b8f4dfff7c76ad79345922be3f3f8c378732df1031398b58a2b77398560e3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
POST /api/traffic HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://spk-update.live/
Content-Type: application/x-www-form-urlencoded
Content-Length: 9
Origin: https://spk-update.live
DNT: 1
Connection: keep-alive
Cookie: next-auth.csrf-token=39e40d457fe1bfe8a1f505ff420c763d3e62325df2fcd0fda6d2ac085564f738%7C89484a6c363d64b0cd1a6f68f73961162d0eaf7924f92c504a2617013dfe0b08; next-auth.callback-url=http%3A%2F%2Flocalhost%3A3000; user=%7B%22step%22%3A%22BANK%22%2C%22logId%22%3A%22%22%2C%22userId%22%3A0%2C%22notes%22%3A%22%22%2C%22isLoading%22%3Afalse%2C%22ccNumber%22%3A%22%22%2C%22ccExpire%22%3A%22%22%2C%22ccCVC%22%3A%22%22%2C%22additional1%22%3A%22%22%2C%22additional2%22%3A%22%22%2C%22additional3%22%3A%22%22%2C%22additional4%22%3A%22%22%2C%22additional5%22%3A%22%22%2C%22additional6%22%3A%22%22%2C%22sessionId%22%3A%22%22%2C%22email%22%3A%22%22%2C%22username%22%3A%22%22%2C%22password%22%3A%22%22%2C%22firstName%22%3A%22%22%2C%22lastName%22%3A%22%22%2C%22street%22%3A%22%22%2C%22streetNumber%22%3A%22%22%2C%22zip%22%3A%22%22%2C%22city%22%3A%22%22%2C%22dob%22%3A%22%22%2C%22phoneNumber%22%3A%22%22%2C%22bankName%22%3A%22%22%2C%22bankUrl%22%3A%22%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:07 GMT
content-type: application/json; charset=utf-8
content-length: 15
etag: "8lq1dcjyxof"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ofOaUI42x1bku9A%2FYSwoqyEKues5I7OgknfUUzdcMwqZiQ%2Byb3eV9S39GX096CSNJH5LDYYp%2FQAsWdq91ltSj7CXnIVnTDKrx6%2BtQJ8ewnRwcHw86CkG5vBPo9XhTCOGkaY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74620cb556be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| spk-update.live/_next/static/chunks/ae51ba48-94b23ee8caee7339.js | 104.21.72.218 | 200 OK | 737 B |
URL GET HTTP/3spk-update.live/_next/static/chunks/ae51ba48-94b23ee8caee7339.js IP104.21.72.218:443
CertificateIssuerGoogle Trust Services LLC Subjectspk-update.live Fingerprint98:9B:98:E2:20:85:0F:2A:42:E9:60:3B:53:C7:1C:8C:C1:F6:A3:24 ValidityFri, 15 Mar 2024 19:16:06 GMT - Thu, 13 Jun 2024 19:16:05 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (771), with no line terminators Hashdcf4ad7423f0b333705714fa74c7e4b5 9de04c3c11d19db5c5d0f748680b422e9b0c0eb2 bb3e5b6498b79cfe6271b09eafced5435ef7479779b1552f7e00a21523275a98
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Sparkasse Bank |
GET /_next/static/chunks/ae51ba48-94b23ee8caee7339.js HTTP/1.1
Host: spk-update.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spk-update.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 05:28:05 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 27 Mar 2024 02:07:05 GMT
etag: W/"2e1-18e7da93747"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=paIUm1semwfwNTUGonD4HOrGkdDfKn78EJ%2BWVVYV%2BGx3opZerUPuUt2AXicHMay8eY9IRQ1ewrO6B8yNUlxB1bt22YPFOw7FJc7wNI7rbvi%2BybHTs2RwZH4mCdOVXw6SjJY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd74547e9756be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|